Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
05/10/2022, 15:30
Behavioral task
behavioral1
Sample
cells2022.06.28.exe
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
cells2022.06.28.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
cells2022.06.28.exe
-
Size
1023KB
-
MD5
8e663b28c0eb4561b557544016c78017
-
SHA1
634dfed5a3ab93bfa45c76494e11e1239c2b2b18
-
SHA256
eace8c7ae4a071b1767925483651abcd2650c155688e74c9822150596464369f
-
SHA512
4b0f2ec1b1136df868b286ff89d7a0d274afc9baf4d53b5d09aa8af62c32da5a28417b7cd5a9c55c1748cf5daa8c4c984c0fcc50fe50a7613e0fc7f4a29e0f00
-
SSDEEP
12288:I55nnhg2FXy4wa1AOfhnsdM9olx0oSuN6z/+cKBlQVEQimIZGi1eQqhaYsHrFacD:6fUMAxgOBlPQ617yanHRyRHqU
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1536-55-0x0000000000400000-0x0000000000627000-memory.dmp upx behavioral1/memory/1536-56-0x0000000000400000-0x0000000000627000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1536 cells2022.06.28.exe 1536 cells2022.06.28.exe